diff --git a/.github/workflows/codspeed.yml b/.github/workflows/codspeed.yml
index 4dc2b81..6edd7c4 100644
--- a/.github/workflows/codspeed.yml
+++ b/.github/workflows/codspeed.yml
@@ -79,7 +79,7 @@ jobs:
         # pins in .codspeed-runner-version and verifies against its checked-in
         # SHA-256 manifest. Omitting a second version setting also avoids drift from the
         # pinned action SHA.
-        uses: CodSpeedHQ/action@0ca9cbbf4623b599a6c3ed4fc8a922942705d9f1 # v5.0.2
+        uses: CodSpeedHQ/action@c4fd08a3a159bd0cc208da1e0edf32b8c47d75e5 # v5.4.0
         with:
           # Match hpke-http: CodSpeed owns both CPU-simulation and memory measurements.
           mode: simulation,memory